android_kernel_samsung_a7y1.../drivers/usb/serial
Qiujun Huang dc8b6e55fa USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
commit 57aa9f294b09463492f604feaa5cc719beaace32 upstream.

Fix slab-out-of-bounds read in the interrupt-URB completion handler.

The boundary condition should be (length - 1) as we access
data[position + 1].

Reported-and-tested-by: syzbot+37ba33391ad5f3935bbd@syzkaller.appspotmail.com
Signed-off-by: Qiujun Huang <hqjagain@gmail.com>
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-04-07 14:24:43 +02:00
..
aircable.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ark3116.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
belkin_sa.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
belkin_sa.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
bus.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ch341.c USB: serial: ch341: handle unbound port at reset_resume 2020-04-07 13:37:37 +02:00
console.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
cp210x.c usb-serial: cp201x: support Mark-10 digital force gauge 2020-04-07 12:37:35 +02:00
cyberjack.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
cypress_m8.c USB: serial: cypress_m8: fix interrupt-out transfer length 2020-04-07 12:32:39 +02:00
cypress_m8.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
digi_acceleport.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
empeg.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ezusb_convert.pl A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
f81232.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ftdi_sio_ids.h USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P 2020-04-07 12:43:18 +02:00
ftdi_sio.c USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P 2020-04-07 12:43:18 +02:00
ftdi_sio.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
garmin_gps.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
generic.c USB: serial: fix unthrottle races 2020-04-06 17:01:24 +02:00
io_16654.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
io_edgeport.c USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback 2020-04-07 14:24:43 +02:00
io_edgeport.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
io_ionsp.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
io_tables.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
io_ti.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
io_ti.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
io_usbvend.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ipaq.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ipw.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ir-usb.c USB: serial: ir-usb: fix IrLAP framing 2020-04-07 13:45:29 +02:00
iuu_phoenix.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
iuu_phoenix.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Kconfig A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
keyspan_pda.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
keyspan_usa26msg.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
keyspan_usa28msg.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
keyspan_usa49msg.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
keyspan_usa67msg.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
keyspan_usa90msg.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
keyspan.c USB: serial: keyspan: handle unbound ports 2020-04-07 13:37:59 +02:00
keyspan.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
kl5kusb105.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
kl5kusb105.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
kobil_sct.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
kobil_sct.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile-keyspan_pda_fw A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mct_u232.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mct_u232.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
metro-usb.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mos7720.c USB: serial: mos7720: fix remote wakeup 2020-04-07 12:37:40 +02:00
mos7840.c USB: serial: mos7840: fix remote wakeup 2020-04-07 12:37:42 +02:00
mxuport.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
navman.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
omninet.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
opticon.c USB: serial: opticon: fix control-message timeouts 2020-04-07 13:37:33 +02:00
option.c USB: serial: option: add Wistron Neweb D19Q1 2020-04-07 14:24:39 +02:00
oti6858.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
oti6858.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pl2303.c USB: serial: pl2303: add device-id for HP LD381 2020-04-07 14:14:09 +02:00
pl2303.h USB: serial: pl2303: add device-id for HP LD381 2020-04-07 14:14:09 +02:00
qcaux.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
qcserial.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
quatech2.c USB: serial: quatech2: handle unbound ports 2020-04-07 13:37:41 +02:00
safe_serial.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sierra.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
spcp8x5.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ssu100.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
symbolserial.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ti_usb_3410_5052.c USB: serial: ti_usb_3410_5052: fix port-close races 2020-04-07 09:26:32 +02:00
ti_usb_3410_5052.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
usb_debug.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
usb_wwan.c USB: serial: option: add ZLP support for 0x1bc7/0x9010 2020-04-07 13:32:44 +02:00
usb-serial-simple.c USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx 2020-04-07 13:37:31 +02:00
usb-serial.c USB: serial: suppress driver bind attributes 2020-04-07 13:37:35 +02:00
usb-wwan.h USB: serial: option: add ZLP support for 0x1bc7/0x9010 2020-04-07 13:32:44 +02:00
visor.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
visor.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
whiteheat.c USB: serial: whiteheat: fix line-speed endianness 2020-04-07 09:28:18 +02:00
whiteheat.h USB: serial: whiteheat: fix line-speed endianness 2020-04-07 09:28:18 +02:00
wishbone-serial.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xsens_mt.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30